enable new rate limiting config

Author: netomi

Dockerfile

@@ -1,5 +1,5 @@
-ARG SERVER_VERSION=d076903
-ARG SERVER_VERSION_STRING=v0.32.0-rc.1
+ARG SERVER_VERSION=rate-limiting
+ARG SERVER_VERSION_STRING=v0.32.0-rc.2
 
 # Builder image to compile the website
 FROM ubuntu:24.04 AS builder

configuration/application.yml

@@ -102,7 +102,7 @@ org:
     miscellaneous:
       allow-anonymous-data-usage: false
 bucket4j:
-  enabled: true
+  enabled: false
   cache-to-use: redis-cluster-jedis
   filters:
     - cache-name: buckets
@@ -228,6 +228,25 @@ ovsx:
       subject: 'Open VSX Access Tokens Revoked'
       template: 'revoked-access-tokens.html'
 
+  # tier-based rate limiting configuration
+  rate-limit:
+    enabled: true
+    filters:
+      - url: '/api/.*'
+        http-response-headers:
+          Access-Control-Allow-Origin: '*'
+          Access-Control-Expose-Headers: X-Rate-Limit-Retry-After-Seconds, X-Rate-Limit-Remaining
+    default-http-content-type: application/json
+    default-http-response-body: >
+      {
+        "type": "https://open-vsx.org/probs/rate-limit-exceeded",
+        "title": "Too Many Requests",
+        "status": 429,
+        "detail": "A request rate limit has been exceeded for your current usage tier. Open VSX enforces tier-based limits to ensure reliable service. If this is unexpected for your use case, please contact us.",
+        "documentation": "https://github.com/EclipseFdn/open-vsx.org/wiki/Rate-Limiting",
+        "contact": "infrastructure@eclipse-foundation.org"
+      }
+
   # General scanning support
   scanning:
     enabled: true

website/package.json

@@ -6,7 +6,7 @@
     "repository": "https://github.com/eclipse/open-vsx.org",
     "license": "EPL-2.0",
     "dependencies": {
-        "openvsx-webui": "npm:openvsx-webui-test@0.18.0-dev.0"
+        "openvsx-webui": "npm:openvsx-webui-test@0.18.0-dev.1"
     },
     "resolutions": {
         "qs": "^6.14.1"